Report Overview

  1. Visited public
    2023-09-24 23:17:55
    Tags
  2. URL

    sucrityidbusiness2288.duckdns.org/confirm.html

  3. Finishing URL

    sucrityidbusiness2288.duckdns.org/confirm.html

  4. IP / ASN
    103.37.124.105

    #0

    Title
    Facebook
  5. Suspicious - DynDNS domain

Detections
urlquery
4
Network Intrusion Detection
10
Threat Detection Systems
12

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
kit.fontawesome.com18682012-10-182019-12-16 20:51:312023-09-24 18:38:14
sucrityidbusiness2288.duckdns.orgunknown2013-04-122023-09-23 12:03:292023-09-24 17:46:14
ocsp.pki.goog1752016-06-132018-07-01 08:43:072023-09-24 18:12:04
ajax.googleapis.com129052005-01-252013-08-16 11:51:312023-09-24 23:44:58
ocsp.sectigo.com4872018-08-162019-11-29 12:50:242023-09-24 23:31:12
api.ipify.org32672014-01-052014-10-06 14:38:432023-09-23 18:12:44
ka-f.fontawesome.com35982012-10-182019-12-17 07:36:132023-09-24 19:09:02
upload.wikimedia.org22152003-03-162012-05-21 11:39:452023-09-23 19:03:13
cdn.jsdelivr.net4392012-05-162012-09-30 02:15:092023-09-24 18:14:53
code.jquery.com6342005-12-102012-05-21 19:28:022023-09-24 19:47:37

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IP 64.185.227.156

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumsucrityidbusiness2288.duckdns.org/confirm.htmlFacebook, Inc.
mediumsucrityidbusiness2288.duckdns.org/Facebook, Inc.
mediumsucrityidbusiness2288.duckdns.org/Facebook, Inc.

PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumsucrityidbusiness2288.duckdns.orgSinkholed
mediumsucrityidbusiness2288.duckdns.orgSinkholed
mediumsucrityidbusiness2288.duckdns.orgSinkholed

ThreatFox

No alerts detected


JavaScript (7)

HTTP Transactions (19)

URLIPResponseSize
cdn.jsdelivr.net/npm/bootstrap@4.4.1/dist/css/bootstrap.min.css
151.101.193.229200 OK26 kB
sucrityidbusiness2288.duckdns.org/confirm.html
103.37.124.105200 OK147 kB
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
151.101.193.229200 OK24 kB
cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js
151.101.193.229200 OK7.8 kB
cdn.jsdelivr.net/npm/bootstrap@4.4.1/dist/js/bootstrap.min.js
151.101.193.229200 OK17 kB
code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK31 kB
ocsp.pki.goog/gts1c3
142.250.74.131 471 B
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
142.250.74.42200 OK31 kB
ocsp.pki.goog/gts1c3
142.250.74.131 471 B
sucrityidbusiness2288.duckdns.org/Facebook_f_logo.png
103.37.124.105200 OK73 kB
kit.fontawesome.com/83fd8385f7.js
104.18.23.52200 OK28 kB
ocsp.sectigo.com/
104.18.14.101 471 B
api.ipify.org/?format=json
64.185.227.156200 OK21 B
sucrityidbusiness2288.duckdns.org/recovery.png
103.37.124.105200 OK274 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-font-face.min.css?token=83fd8385f7
172.64.130.9200 OK1.8 kB
upload.wikimedia.org/wikipedia/commons/5/51/Facebook_f_logo_%282019%29.svg
185.15.59.240200 OK358 B
ka-f.fontawesome.com/releases/v6.4.2/css/free.min.css?token=83fd8385f7
172.64.130.9200 OK103 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-shims.min.css?token=83fd8385f7
172.64.130.9200 OK28 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free-v5-font-face.min.css?token=83fd8385f7
172.64.130.9200 OK823 B